Job Requirements
Honolulu, HI
Top Secret Polygraph not specified
Mid Level Career (5+ yrs experience)
$125,000 - $135,000
Job Description
Cyber Countermeasure Specialist
Job Description:
As a Cyber Countermeasure Specialist, you will play a crucial role in supporting the Joint Fires Network by detecting, containing, and mitigating cyber threats across highly classified environments. You will engineer and tune security sensors, develop custom detection rules and signatures, build incident-response and containment playbooks, and support classified spill/breach response using advanced technologies.
Responsibilities:
Engineer, operationally validate, deploy, and maintain defensive countermeasures, detection signatures, sensor tuning, and containment workflows.
Tune advanced network sensor grids and author actionable threat containment playbooks within Atlassian JIRA.
Enforce strict Defense Intelligence Agency (DIA) TS/SCI spill and breach containment standards.
Collaborate closely with Tier II NOC engineers and NIWC pipeline architects to neutralize adversarial activity.
Configure, tune, and operationalize advanced boundary and en-route security sensors.
Design, test, validate, and maintain custom intrusion detection rules and scripts.
Collaborate with NIWC data engineers to validate log ingestion pipelines.
Track all deployed signatures and mitigation actions within JIRA.
Establish, document, and test rapid rollback mechanisms for sensor configurations.
Leverage Atlassian JIRA to design, automate, document, and maintain SOPs and execution runbooks.
Support the drafting, maintenance, and technical execution of the Incident Response Plan.
Implement and enforce rigorous DIA protocols for containment and technical quarantine of classified data spills.
Verify that all active countermeasures adhere to formal TS/SCI Information Systems Security Program audit criteria.
Partner daily with 24/7 Real-Time Analysts, Tier II NOC administrators, and DISA Field Command leadership.
Conduct all defensive engineering within designated Sensitive Compartmented Information Facilities (SCIF).
Essential Skills:
Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, or related discipline with 2+ years of direct experience in intrusion detection/prevention engineering, custom signature creation, or network defense operations; OR an Associate degree with 4+ years; OR 6+ years of relevant experience/military cyber service in lieu of degree.
Must hold a valid certification or degree meeting DoD 8140.03 / DCWF Work Role Code 521: Cyber Defense Infrastructure Support Specialist at the Basic Proficiency Level.
Accepted certifications include: CySA+, CCNA-Security, GSEC, Security+ CE, CND, CEH, or higher (e.g., CASP+ CE, CISSP, GCIA, GCIH).
Additional Skills and Qualifications:
Hands-on experience tuning security sensors and creating custom detection rules/signatures using tools such as Snort/Suricata, Elastic, YARA, and Palo Alto.
Ability to develop and execute containment playbooks, isolate compromised systems, respond to classified spills/breaches, and translate detected threats into actionable countermeasures.
Strong understanding of TCP/IP, BGP, IPsec, DNS, TLS, firewalls, and SD-WAN, with experience analyzing network traffic using tools such as Wireshark and tcpdump.
Work Environment:
Work is conducted on-site in Honolulu, Hawaii, within the United States. The role involves operating across up to 30 active operational nodes, including SD-WAN transport fabrics and out-of-band management links. The position requires working within designated Sensitive Compartmented Information Facilities (SCIF) and adhering to strict protocols for classified data handling.
Company Benefits:
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:
• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long-term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)
Job Description:
As a Cyber Countermeasure Specialist, you will play a crucial role in supporting the Joint Fires Network by detecting, containing, and mitigating cyber threats across highly classified environments. You will engineer and tune security sensors, develop custom detection rules and signatures, build incident-response and containment playbooks, and support classified spill/breach response using advanced technologies.
Responsibilities:
Engineer, operationally validate, deploy, and maintain defensive countermeasures, detection signatures, sensor tuning, and containment workflows.
Tune advanced network sensor grids and author actionable threat containment playbooks within Atlassian JIRA.
Enforce strict Defense Intelligence Agency (DIA) TS/SCI spill and breach containment standards.
Collaborate closely with Tier II NOC engineers and NIWC pipeline architects to neutralize adversarial activity.
Configure, tune, and operationalize advanced boundary and en-route security sensors.
Design, test, validate, and maintain custom intrusion detection rules and scripts.
Collaborate with NIWC data engineers to validate log ingestion pipelines.
Track all deployed signatures and mitigation actions within JIRA.
Establish, document, and test rapid rollback mechanisms for sensor configurations.
Leverage Atlassian JIRA to design, automate, document, and maintain SOPs and execution runbooks.
Support the drafting, maintenance, and technical execution of the Incident Response Plan.
Implement and enforce rigorous DIA protocols for containment and technical quarantine of classified data spills.
Verify that all active countermeasures adhere to formal TS/SCI Information Systems Security Program audit criteria.
Partner daily with 24/7 Real-Time Analysts, Tier II NOC administrators, and DISA Field Command leadership.
Conduct all defensive engineering within designated Sensitive Compartmented Information Facilities (SCIF).
Essential Skills:
Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, or related discipline with 2+ years of direct experience in intrusion detection/prevention engineering, custom signature creation, or network defense operations; OR an Associate degree with 4+ years; OR 6+ years of relevant experience/military cyber service in lieu of degree.
Must hold a valid certification or degree meeting DoD 8140.03 / DCWF Work Role Code 521: Cyber Defense Infrastructure Support Specialist at the Basic Proficiency Level.
Accepted certifications include: CySA+, CCNA-Security, GSEC, Security+ CE, CND, CEH, or higher (e.g., CASP+ CE, CISSP, GCIA, GCIH).
Additional Skills and Qualifications:
Hands-on experience tuning security sensors and creating custom detection rules/signatures using tools such as Snort/Suricata, Elastic, YARA, and Palo Alto.
Ability to develop and execute containment playbooks, isolate compromised systems, respond to classified spills/breaches, and translate detected threats into actionable countermeasures.
Strong understanding of TCP/IP, BGP, IPsec, DNS, TLS, firewalls, and SD-WAN, with experience analyzing network traffic using tools such as Wireshark and tcpdump.
Work Environment:
Work is conducted on-site in Honolulu, Hawaii, within the United States. The role involves operating across up to 30 active operational nodes, including SD-WAN transport fabrics and out-of-band management links. The position requires working within designated Sensitive Compartmented Information Facilities (SCIF) and adhering to strict protocols for classified data handling.
Company Benefits:
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:
• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long-term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)
group id: 10105424
